Lucene search
+L

1241 matches found

Vulnrichment
Vulnrichment
added 2022/03/11 6:0 p.m.8 views

CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

6.5CVSS6.3AI score0.01239EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/03/11 6:0 p.m.50 views

CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

6.5CVSS6.6AI score0.01239EPSS
SaveExploits0References3
CVE
CVE
added 2022/03/11 6:0 p.m.120 views

CVE-2022-23625

CVE-2022-23625 affects Wire-ios on Apple iOS prior to version 3.95. Malformed resource identifiers can be generated and sent between Wire users, causing the iOS Wire Client to repeatedly crash on launch (DoS-like impact). The root cause is in the wire-ios-transport component, where code that remo...

6.5CVSS6.3AI score0.01239EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2022/03/11 12:0 a.m.10 views

Wire-ios 安全漏洞

Wire-ios is a client layer that handles all the data displayed in a mobile application. A security vulnerability exists in Wire-ios, which stems from the fact that in versions prior to 3.95, an incorrectly formatted resource identifier may cause the iOS Wire client to repeatedly crash on startup,...

6.5CVSS6.5AI score0.01239EPSS
SaveExploits0References6
OSV
OSV
added 2022/03/01 7:15 p.m.16 views

CVE-2021-41193

wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...

9.8CVSS9.8AI score
SaveExploits0References2
Prion
Prion
added 2022/03/01 7:15 p.m.24 views

Format string

wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...

7.5CVSS9.8AI score0.02466EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/03/01 6:58 p.m.81 views

GHSA-2J6V-XPF3-XVRV Use of Externally-Controlled Format String in wire-avs

Impact A remote format string vulnerability allowed an attacker to cause a denial of service or possibly execute arbitrary code. Patches The issue has been fixed in wire-avs 7.1.12 and is already included on all Wire products currently used version is 8.0.x Workarounds No workaround known...

9.8CVSS9.8AI score0.02466EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/03/01 6:58 p.m.40 views

Use of Externally-Controlled Format String in wire-avs

Impact A remote format string vulnerability allowed an attacker to cause a denial of service or possibly execute arbitrary code. Patches The issue has been fixed in wire-avs 7.1.12 and is already included on all Wire products currently used version is 8.0.x Workarounds No workaround known...

9.8CVSS3.1AI score0.02466EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/01 6:25 p.m.9 views

CVE-2021-41193 Use of Externally-Controlled Format String in wire-avs

wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...

9.8CVSS9.8AI score0.02466EPSS
SaveExploits0References2
CVE
CVE
added 2022/03/01 6:25 p.m.108 views

CVE-2021-41193

Wire-AVS (the AVS component of Wire) is affected by a remote format string vulnerability in versions before 7.1.12. The issue can lead to denial of service or potentially arbitrary code execution. A fix is available in wire-avs 7.1.12 and has been integrated into Wire products. Connected sources ...

9.8CVSS9.9AI score0.02466EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/01 6:25 p.m.36 views

CVE-2021-41193 Use of Externally-Controlled Format String in wire-avs

wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...

9.8CVSS10AI score0.02466EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/03/01 12:0 a.m.11 views

Wire-AVS 格式化字符串错误漏洞

Wire-AVS is the repository is part of the Wire source code. A formatting string error vulnerability exists in Wire-AVS that could be exploited by an attacker to cause a denial of service or possibly execute arbitrary code...

9.8CVSS8.7AI score0.02466EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/18 6:15 p.m.6 views

ALPINE-CVE-2016-2124

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required...

5.9CVSS7AI score0.01752EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.67 views

Wire webapp has an unspecified vulnerability

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, can make voice calls, send photos, and its original way of saying hello, PING. wire webapp has a security vulnerability, and no details of the vulnerability...

4.4CVSS2.1AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/04 11:15 p.m.37 views

CVE-2022-23605

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS0.00307EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/04 11:15 p.m.20 views

Design/Logic Flaw

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

2.1CVSS3.8AI score0.00307EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/02/04 10:32 p.m.71 views

CVE-2022-23605

CVE-2022-23605 affects Wire Webapp: expired ephemeral messages were not reliably removed from local chat history and, in affected versions prior to 2022-01-27-production.0, ephemeral messages/assets could be accessible via the local search function. Viewing a message in chat view triggers deletio...

4.4CVSS3.7AI score0.00307EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/02/04 10:32 p.m.26 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2022/02/04 10:32 p.m.7 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.6AI score0.00307EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/02/04 10:32 p.m.45 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.9AI score0.00307EPSS
SaveExploits0References2
Rows per page
Query Builder